Release v1.155.0 - staging → master

Jenkinsfile-playwright.groovy

@@ -0,0 +1,3 @@
+library 'cloud-manager-ui-tests'
+
+runTestsRelease()

packages/api-v4/CHANGELOG.md

@@ -1,3 +1,22 @@
+## [2025-11-18] - v0.153.0
+
+
+### Added:
+
+- IAM Parent/Child: delegate permissions ([#13033](https://github.com/linode/manager/pull/13033))
+- Added `Akamai Cloud Pulse Logs ` to the `AccountCapability` type ([#13062](https://github.com/linode/manager/pull/13062))
+
+### Changed:
+
+- IAM: cleanup for nodebalancer permissions ([#13017](https://github.com/linode/manager/pull/13017))
+
+### Upcoming Features:
+
+- Clean up Delivery Stream and Destination interfaces ([#13038](https://github.com/linode/manager/pull/13038))
+- Add new API endpoints, and types for Firewall RS & PL ([#13061](https://github.com/linode/manager/pull/13061))
+- CloudPulse-Metrics: Update `CloudPulseServiceType` and `CapabilityServiceTypeMapping` at types.ts for new service - lke ([#13064](https://github.com/linode/manager/pull/13064))
+- New IAM getUserEntitiesByPermission endpoint ([#13070](https://github.com/linode/manager/pull/13070))
+
 ## [2025-11-04] - v0.152.0
 
 

packages/api-v4/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linode/api-v4",
-  "version": "0.152.0",
+  "version": "0.153.0",
   "homepage": "https://github.com/linode/manager/tree/develop/packages/api-v4",
   "bugs": {
     "url": "https://github.com/linode/manager/issues"

packages/api-v4/src/account/types.ts

@@ -62,6 +62,7 @@ export type BillingSource = 'akamai' | 'linode';
 export const accountCapabilities = [
   'Akamai Cloud Load Balancer',
   'Akamai Cloud Pulse',
+  'Akamai Cloud Pulse Logs',
   'Block Storage',
   'Block Storage Encryption',
   'Cloud Firewall',

packages/api-v4/src/cloudpulse/types.ts

@@ -8,6 +8,7 @@ export type CloudPulseServiceType =
   | 'dbaas'
   | 'firewall'
   | 'linode'
+  | 'lke'
   | 'nodebalancer'
   | 'objectstorage';
 export type AlertClass = 'dedicated' | 'shared';
@@ -381,6 +382,7 @@ export const capabilityServiceTypeMapping: Record<
   firewall: 'Cloud Firewall',
   objectstorage: 'Object Storage',
   blockstorage: 'Block Storage',
+  lke: 'Kubernetes',
 };
 
 /**

packages/api-v4/src/delivery/types.ts

@@ -20,13 +20,11 @@ export interface AuditData {
 }
 
 export interface Stream extends AuditData {
-  destinations: Destination[];
+  destinations: DestinationCore[];
   details: StreamDetailsType;
   id: number;
   label: string;
-  primary_destination_id: number;
   status: StreamStatus;
-  stream_audit_id: number;
   type: StreamType;
   version: string;
 }
@@ -46,11 +44,14 @@ export const destinationType = {
 export type DestinationType =
   (typeof destinationType)[keyof typeof destinationType];
 
-export interface Destination extends AuditData {
+export interface DestinationCore {
   details: DestinationDetails;
   id: number;
   label: string;
   type: DestinationType;
+}
+
+export interface Destination extends DestinationCore, AuditData {
   version: string;
 }
 

packages/api-v4/src/firewalls/firewalls.ts

@@ -20,7 +20,9 @@ import type {
   Firewall,
   FirewallDevice,
   FirewallDevicePayload,
+  FirewallPrefixList,
   FirewallRules,
+  FirewallRuleSet,
   FirewallSettings,
   FirewallTemplate,
   FirewallTemplateSlug,
@@ -305,3 +307,55 @@ export const getTemplate = (templateSlug: FirewallTemplateSlug) =>
       )}`,
     ),
   );
+
+/**
+ * getFirewallRuleSets
+ *
+ * Returns a paginated list of all Cloud Firewall Rule Sets.
+ */
+export const getFirewallRuleSets = (params?: Params, filter?: Filter) =>
+  Request<Page<FirewallRuleSet>>(
+    setMethod('GET'),
+    setParams(params),
+    setXFilter(filter),
+    setURL(`${BETA_API_ROOT}/networking/firewalls/rulesets`),
+  );
+
+/**
+ * getFirewallRuleSet
+ *
+ * Get a specific Firewall Rule Set by its ID.
+ */
+export const getFirewallRuleSet = (ruleSetID: number) =>
+  Request<FirewallRuleSet>(
+    setMethod('GET'),
+    setURL(
+      `${BETA_API_ROOT}/networking/firewalls/rulesets/${encodeURIComponent(ruleSetID)}`,
+    ),
+  );
+
+/**
+ * getFirewallPrefixLists
+ *
+ * Returns a paginated list of all Cloud Firewall Prefix Lists.
+ */
+export const getFirewallPrefixLists = (params?: Params, filter?: Filter) =>
+  Request<Page<FirewallPrefixList>>(
+    setMethod('GET'),
+    setParams(params),
+    setXFilter(filter),
+    setURL(`${BETA_API_ROOT}/networking/prefixlists`),
+  );
+
+/**
+ * getFirewallPrefixList
+ *
+ * Get a specific Firewall Prefix List by its ID.
+ */
+export const getFirewallPrefixList = (prefixListID: number) =>
+  Request<FirewallPrefixList>(
+    setMethod('GET'),
+    setURL(
+      `${BETA_API_ROOT}/networking/prefixlists/${encodeURIComponent(prefixListID)}`,
+    ),
+  );

packages/api-v4/src/firewalls/types.ts

@@ -106,3 +106,30 @@ export interface FirewallSettings {
 export interface UpdateFirewallSettings {
   default_firewall_ids: Partial<DefaultFirewallIDs>;
 }
+
+export interface FirewallRuleSet {
+  created: string;
+  deleted: null | string;
+  description: string;
+  id: number;
+  is_service_defined: boolean;
+  label: string;
+  rules: FirewallRuleType[];
+  type: string;
+  updated: string;
+  version: number;
+}
+
+export type FirewallPrefixListVisibility = 'private' | 'public' | 'restricted';
+
+export interface FirewallPrefixList {
+  created: string;
+  description: string;
+  id: number;
+  ipv4?: null | string[];
+  ipv6?: null | string[];
+  name: string;
+  updated: string;
+  version: number;
+  visibility: FirewallPrefixListVisibility;
+}

packages/api-v4/src/iam/iam.ts

@@ -3,10 +3,12 @@ import Request, { setData, setMethod, setURL } from '../request';
 
 import type {
   AccessType,
+  EntityByPermission,
   IamAccountRoles,
   IamUserRoles,
   PermissionType,
 } from './types';
+import type { EntityType } from 'src/entities/types';
 
 /**
  * getUserRoles
@@ -100,3 +102,26 @@ export const getUserEntityPermissions = (
     ),
     setMethod('GET'),
   );
+
+/**
+ * getUserEntitiesByPermission
+ *
+ * Returns the available entities for a given permission.
+ */
+export interface GetEntitiesByPermissionParams {
+  entityType: EntityType;
+  permission: PermissionType;
+  username: string | undefined;
+}
+
+export const getUserEntitiesByPermission = ({
+  username,
+  entityType,
+  permission,
+}: GetEntitiesByPermissionParams) =>
+  Request<EntityByPermission[]>(
+    setURL(
+      `${BETA_API_ROOT}/iam/users/${username}/entities/${entityType}?permission=${permission}`,
+    ),
+    setMethod('GET'),
+  );

packages/api-v4/src/iam/types.ts

@@ -75,6 +75,7 @@ export type AccountAdmin =
   | 'answer_profile_security_questions'
   | 'cancel_account'
   | 'cancel_service_transfer'
+  | 'create_child_account_token'
   | 'create_profile_pat'
   | 'create_profile_ssh_key'
   | 'create_profile_tfa_secret'
@@ -91,17 +92,22 @@ export type AccountAdmin =
   | 'is_account_admin'
   | 'list_account_agreements'
   | 'list_account_logins'
+  | 'list_all_child_accounts'
   | 'list_available_services'
   | 'list_default_firewalls'
+  | 'list_delegate_users'
   | 'list_enrolled_beta_programs'
   | 'list_service_transfers'
+  | 'list_user_delegate_accounts'
   | 'list_user_grants'
   | 'revoke_profile_app'
   | 'revoke_profile_device'
   | 'send_profile_phone_number_verification_code'
   | 'update_account'
   | 'update_account_settings'
+  | 'update_default_delegate_access'
   | 'update_default_firewalls'
+  | 'update_delegate_users'
   | 'update_profile'
   | 'update_profile_pat'
   | 'update_profile_ssh_key'
@@ -112,6 +118,7 @@ export type AccountAdmin =
   | 'view_account'
   | 'view_account_login'
   | 'view_account_settings'
+  | 'view_child_account'
   | 'view_enrolled_beta_program'
   | 'view_network_usage'
   | 'view_profile_security_question'
@@ -363,8 +370,8 @@ export type LinodeViewer =
   | 'view_linode_stats';
 
 /** Permissions associated with the "nodebalancer_admin" role. */
-// TODO: UIE-9154 - verify mapping for Nodebalancer as this is not migrated yet
 export type NodeBalancerAdmin =
+  | 'create_nodebalancer_config_node'
   | 'delete_nodebalancer'
   | 'delete_nodebalancer_config'
   | 'delete_nodebalancer_config_node'
@@ -384,12 +391,13 @@ export type NodeBalancerContributor =
 /** Permissions associated with the "nodebalancer_viewer" role. */
 export type NodeBalancerViewer =
   | 'list_nodebalancer_config_nodes'
-  | 'list_nodebalancer_configs'
   | 'list_nodebalancer_firewalls'
+  | 'list_nodebalancer_vpc_configs'
   | 'view_nodebalancer'
   | 'view_nodebalancer_config'
   | 'view_nodebalancer_config_node'
-  | 'view_nodebalancer_statistics';
+  | 'view_nodebalancer_statistics'
+  | 'view_nodebalancer_vpc_config';
 
 /** Permissions associated with the "volume_admin" role. */
 export type VolumeAdmin = 'delete_volume' | VolumeContributor;
@@ -448,6 +456,11 @@ export interface Roles {
   name: RoleName;
   permissions: PermissionType[];
 }
+export interface EntityByPermission {
+  id: number;
+  label: string;
+  type: EntityType;
+}
 
 export type IamAccessType = keyof IamAccountRoles;
 

packages/manager/CHANGELOG.md

@@ -4,6 +4,63 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## [2025-11-18] - v1.155.0
+
+
+### Added:
+
+- IAM Parent/Child: delegate permissions for child account ([#13033](https://github.com/linode/manager/pull/13033))
+- IAM: add a permission check for delete nodebalancer drawer ([#13043](https://github.com/linode/manager/pull/13043))
+- Implement pagination for Plans table ([#13055](https://github.com/linode/manager/pull/13055))
+- A notice banner to inform the customers about the upcoming maintenance activity in longview and to download and use the new GPG key ([#13080](https://github.com/linode/manager/pull/13080))
+
+### Changed:
+
+- IAM: clean up in mapping for nodebalancer permissions ([#13017](https://github.com/linode/manager/pull/13017))
+- IAM: fix permissiom's check for vpc for assigning/unassigning linodes ([#13050](https://github.com/linode/manager/pull/13050))
+- ACLP Alert: control `edit & delete button` based on status using flag ([#13052](https://github.com/linode/manager/pull/13052))
+
+### Fixed:
+
+- Typo + expose search filters on /iam/roles route ([#13034](https://github.com/linode/manager/pull/13034))
+- Address oAuth issue with IAM OAuthCallback  ([#13037](https://github.com/linode/manager/pull/13037))
+- IAM: tags editing was enabled for restricted users ([#13046](https://github.com/linode/manager/pull/13046))
+- IAM Child Account - user not found error handling ([#13047](https://github.com/linode/manager/pull/13047))
+- IAM: restricted  users could access delete and detach popups without permissions ([#13049](https://github.com/linode/manager/pull/13049))
+- Race condition with Preferences overrides in PrimaryNav ([#13056](https://github.com/linode/manager/pull/13056))
+- IAM: add tooltips for disabled buttons for nodebalancers, remove notification banner ([#13058](https://github.com/linode/manager/pull/13058))
+- IAM: incorrect permission check disabled Clone Volume for volume_admin role ([#13065](https://github.com/linode/manager/pull/13065))
+- ACLP Metric: update preference logic to clear children filters ([#13066](https://github.com/linode/manager/pull/13066))
+- Permissions fixes for admin users on users pages ([#13074](https://github.com/linode/manager/pull/13074))
+
+### Tech Stories:
+
+- Replace Formik with React Hook Form in DatabaseManageNetworkingDrawer ([#13002](https://github.com/linode/manager/pull/13002))
+- Replace Formik with React Hook Form in ManageAccessControlDrawer  ([#13044](https://github.com/linode/manager/pull/13044))
+- Add MSW crud support for types API ([#13067](https://github.com/linode/manager/pull/13067))
+
+### Tests:
+
+- Fix flakey timerange test ([#12967](https://github.com/linode/manager/pull/12967))
+- Add Streams Landing, Create Stream and Edit Stream tests ([#13008](https://github.com/linode/manager/pull/13008))
+- Fix flakey stackscript tests ([#13072](https://github.com/linode/manager/pull/13072))
+- Fix flakey create-database test ([#13076](https://github.com/linode/manager/pull/13076))
+
+### Upcoming Features:
+
+- Logs Delivery Stream/Destination Pendo tags ([#13022](https://github.com/linode/manager/pull/13022))
+- Update Delivery Stream factory ([#13038](https://github.com/linode/manager/pull/13038))
+- IAM: Empty state for the Default Roles and Default Entities Access tabs ([#13042](https://github.com/linode/manager/pull/13042))
+- ACLP-Alerting: Onboarding Blockstorage service for ACLP Alerts ([#13048](https://github.com/linode/manager/pull/13048))
+- Feature flag for Firewall Rulesets & Prefixlists ([#13051](https://github.com/linode/manager/pull/13051))
+- Feature flag for new Generational Compute Plans ([#13054](https://github.com/linode/manager/pull/13054))
+- Limit Logs feature based on `Akamai Cloud Pulse Logs` Account Capability ([#13062](https://github.com/linode/manager/pull/13062))
+- IAM Parent/Child: delegate permissions for parent account ([#13063](https://github.com/linode/manager/pull/13063))
+- CloudPulse-Metrics: Update `FilterConfig.ts`, add lke service and the associated filters ([#13064](https://github.com/linode/manager/pull/13064))
+- Update data-pendo-id tags placemanet within Logs Delivery ([#13069](https://github.com/linode/manager/pull/13069))
+- New IAM getUserEntitiesByPermission (types, queries, hooks, mocks) ([#13070](https://github.com/linode/manager/pull/13070))
+- CloudPulse-Metrics: Enhance `CloudPulseDashboardWithFilters.tsx` and `CloudPulseDashboardSelect.tsx` to handle switching between dashboards in contextual view ([#13073](https://github.com/linode/manager/pull/13073))
+
 ## [2025-11-04] - v1.154.0
 
 ### Added:

packages/manager/cypress.config.ts

@@ -10,6 +10,7 @@ import { discardPassedTestRecordings } from './cypress/support/plugins/discard-p
 import { featureFlagOverrides } from './cypress/support/plugins/feature-flag-override';
 import { fetchAccount } from './cypress/support/plugins/fetch-account';
 import { fetchLinodeClusters } from './cypress/support/plugins/fetch-linode-clusters';
+import { fetchLinodeImages } from './cypress/support/plugins/fetch-linode-images';
 import { fetchLinodeRegions } from './cypress/support/plugins/fetch-linode-regions';
 import { generateTestWeights } from './cypress/support/plugins/generate-weights';
 import { enableHtmlReport } from './cypress/support/plugins/html-report';
@@ -102,6 +103,7 @@ export default defineConfig({
         fetchAccount,
         fetchLinodeRegions,
         fetchLinodeClusters,
+        fetchLinodeImages,
         resetUserPreferences,
         regionOverrideCheck,
         clusterOverrideCheck,

packages/manager/cypress/e2e/core/cloudpulse/aclp-support.spec.ts

@@ -101,9 +101,7 @@ describe('ACLP Components UI varies according to ACLP support by region and user
             .should('be.visible')
             .should('be.enabled');
           // UI displays mock error msg
-          cy.contains(
-            `Error while loading Dashboard with Id - ${this.mockDashboardId}`
-          );
+          cy.contains('Error loading dashboards');
         });
     });